19 citations · 95 across the 31 of their papers we have counts for
33 papers
Black-Box Auditing of Epistemic Reliability in Multi-Agent Debate Distillation
Derui Wang, Zewei Shi, Rayne Holland +4
Debate distillation adapts weaker verifiers using multi-agent debate transcripts to improve their judgement in subsequent debates, but gains on monitored tasks do not establish rel…
FeatMark: Feature-level Watermark Protection against Mimicry Attacks with Diffusion Models
Haoyang Li, Ruoxi Sun, Qingqing Ye +4
Text-to-image diffusion models enable data-efficient "mimicry" attacks, wherein adversaries fine-tune the model on a handful of public photos to synthesize convincing forgeries of…
What You See Is Not What AI Gets: DPAgent-in-the-Middle Defense Against AI-Groomed Deceptive Patterns
Zewei Shi, Ruoxi Sun, Haoyang Li +4
Privacy deceptive patterns in web interfaces manipulate users into disclosing personal data, yet existing defenses are fragmented, static, and increasingly vulnerable to manipulati…
SoK: Unlearnability and Unlearning for Model Dememorization
Mengying Zhang, Derui Wang, Ruoxi Sun +3
Advanced model dememorization methods, including availability poisoning (unlearnability) and machine unlearning, are emerging as key safeguards against data misuse in machine learn…
If you're waiting for a sign... that might not be it! Mitigating Trust Boundary Confusion from Visual Injections on Vision-Language Agentic Systems
Jiamin Chang, Minhui Xue, Ruoxi Sun +3
Recent advances in embodied Vision-Language Agentic Systems (VLAS), powered by large vision-language models (LVLMs), enable AI systems to perceive and reason over real-world scenes…
Keep the Lights On, Keep the Lengths in Check: Plug-In Adversarial Detection for Time-Series LLMs in Energy Forecasting
Hua Ma, Ruoxi Sun, Minhui Xue +4
Accurate time-series forecasting is increasingly critical for planning and operations in low-carbon power systems. Emerging time-series large language models (TS-LLMs) now deliver…
Re-Key-Free, Risky-Free: Adaptable Model Usage Control
Zihan Wang, Zhongkui Ma, Xinguo Feng +6
Deep neural networks (DNNs) have become valuable intellectual property of model owners, due to the substantial resources required for their development. To protect these assets in…
What's Pulling the Strings? Evaluating Integrity and Attribution in AI Training and Inference through Concept Shift
Jiamin Chang, Haoyang Li, Hammond Pearce +3
The growing adoption of artificial intelligence (AI) has amplified concerns about trustworthiness, including integrity, privacy, robustness, and bias. To assess and attribute these…
50 Shades of Deceptive Patterns: A Unified Taxonomy, Multimodal Detection, and Security Implications
Zewei Shi, Ruoxi Sun, Jieshan Chen +5
Deceptive patterns (DPs) are user interface designs deliberately crafted to manipulate users into unintended decisions, often by exploiting cognitive biases for the benefit of comp…
AI-Compass: A Comprehensive and Effective Multi-module Testing Tool for AI Systems
Zhiyu Zhu, Zhibo Jin, Hongsheng Hu +5
AI systems, in particular with deep learning techniques, have demonstrated superior performance for various real-world applications. Given the need for tailored optimization in spe…
SoK: The Security-Safety Continuum of Multimodal Foundation Models through Information Flow and Global Game-Theoretic Analysis of Asymmetric Threats
Ruoxi Sun, Jiamin Chang, Hammond Pearce +5
Multimodal foundation models (MFMs) integrate diverse data modalities to support complex and wide-ranging tasks. However, this integration also introduces distinct safety and secur…
Edge Unlearning is Not "on Edge"! An Adaptive Exact Unlearning System on Resource-Constrained Devices
Xiaoyu Xia, Ziqi Wang, Ruoxi Sun +3
The right to be forgotten mandates that machine learning models enable the erasure of a data owner's data and information from a trained model. Removing data from the dataset alone…
Iterative Window Mean Filter: Thwarting Diffusion-based Adversarial Purification
Hanrui Wang, Ruoxi Sun, Cunjian Chen +4
Face authentication systems have brought significant convenience and advanced developments, yet they have become unreliable due to their sensitivity to inconspicuous perturbations,…
On Security Weaknesses and Vulnerabilities in Deep Learning Systems
Zhongzheng Lai, Huaming Chen, Ruoxi Sun +3
The security guarantee of AI-enabled software systems (particularly using deep learning techniques as a functional core) is pivotal against the adversarial attacks exploiting softw…
Leakage-Resilient and Carbon-Neutral Aggregation Featuring the Federated AI-enabled Critical Infrastructure
Zehang Deng, Ruoxi Sun, Minhui Xue +4
AI-enabled critical infrastructures (ACIs) integrate artificial intelligence (AI) technologies into various essential systems and services that are vital to the functioning of soci…
The Invisible Game on the Internet: A Case Study of Decoding Deceptive Patterns
Zewei Shi, Ruoxi Sun, Jieshan Chen +2
Deceptive patterns are design practices embedded in digital platforms to manipulate users, representing a widespread and long-standing issue in the web and mobile software developm…
Bounded and Unbiased Composite Differential Privacy
Kai Zhang, Yanjun Zhang, Ruoxi Sun +5
The objective of differential privacy (DP) is to protect privacy by producing an output distribution that is indistinguishable between any two neighboring databases. However, tradi…
RAI4IoE: Responsible AI for Enabling the Internet of Energy
Minhui Xue, Surya Nepal, Ling Liu +5
This paper plans to develop an Equitable and Responsible AI framework with enabling techniques and algorithms for the Internet of Energy (IoE), in short, RAI4IoE. The energy sector…
A Duty to Forget, a Right to be Assured? Exposing Vulnerabilities in Machine Unlearning Services
Hongsheng Hu, Shuo Wang, Jiamin Chang +5
The right to be forgotten requires the removal or "unlearning" of a user's data from machine learning models. However, in the context of Machine Learning as a Service (MLaaS), retr…
Not Seen, Not Heard in the Digital World! Measuring Privacy Practices in Children's Apps
Ruoxi Sun, Minhui Xue, Gareth Tyson +3
The digital age has brought a world of opportunity to children. Connectivity can be a game-changer for some of the world's most marginalized children. However, while legislatures a…
M^4I: Multi-modal Models Membership Inference
Pingyi Hu, Zihan Wang, Ruoxi Sun +2
With the development of machine learning techniques, the attention of research has been moved from single-modal learning to multi-modal learning, as real-world data exist in the fo…
The "Beatrix'' Resurrections: Robust Backdoor Detection via Gram Matrices
Wanlun Ma, Derui Wang, Ruoxi Sun +3
Deep Neural Networks (DNNs) are susceptible to backdoor attacks during training. The model corrupted in this way functions normally, but when triggered by certain patterns in the i…
StyleFool: Fooling Video Classification Systems via Style Transfer
Yuxin Cao, Xi Xiao, Ruoxi Sun +3
Video classification systems are vulnerable to adversarial attacks, which can create severe security problems in video verification. Current black-box attacks need a large number o…
PublicCheck: Public Integrity Verification for Services of Run-time Deep Models
Shuo Wang, Sharif Abuadbba, Sidharth Agarwal +6
Existing integrity verification approaches for deep models are designed for private verification (i.e., assuming the service provider is honest, with white-box access to model para…